ST. PAUL, Minn. (AP) — A legislative audit has found that a massive computer system used by the state Department of Education needs better security measures to protect data on students.

The auditor’s report released this week found no breaches or stolen data. But the report says the department lacks “adequate internal controls” and comprehensive security plans. It also found the department failed to document where private data was stored or what controls were needed to keep that data safe.

The computer system is used to direct billions of dollars in state and federal funds to schools. The system also contains private information about students.

Education department spokesman Josh Collins tells the Star Tribune (http://bit.ly/177K7Y6 ) the security of student data is important. The department is working to address the issue.